Technology

NCC alerts of hacking group targeting Telcos, ISPs

In keeping with its commitment to continuously keep stakeholders in the country’s telecoms sector informed, educated and protected, the Nigerian Communications Commission (NCC) wishes to, once again, notify the public of the existence of another hacking group orchestrating cyberespionage in the African telecoms space.

An Iranian hacking group known as Lyceum (also known as Hexane, Siamesekitten, or Spirlin) has been reported to be targeting telecoms, Internet Service Providers (ISPs) and Ministries of Foreign Affairs (MFA) in Africa with upgraded malware in a recent politically motivated attacks oriented in cyberespionage.

Information about this cyber attack is contained in the latest advisory issued by the Nigerian Computer Emergency Response Team (ngCERT). The ngCERT rated the probability and damage level of the new malware as high.

According to the advisory, the hacking group is known to be focused on infiltrating the networks of telecoms companies and ISPs. Between July and October, 2021, Lyceum was implicated in attacks against ISPs and telecoms organisations in Israel, Morocco, Tunisia, and Saudi Arabia.

The advanced persistent threat (APT) group has been linked to campaigns that hit Middle Eastern oil and gas companies in the past. Now, the group appears to have expanded its focus to the technology sector. In addition, the APT is responsible for a campaign against an unnamed African government’s Ministry of Foreign Affairs.

By the attackers’ mode of operation, Lyceum’s initial onslaught vectors include credential stuffing and brute-force attacks. So, once a victim’s system is compromised, the attackers conduct surveillance on specific targets. In that mode, Lyceum will attempt to deploy two different kinds of malware: Shark and Milan (known together as James).

Both malware are backdoors. Shark, a 32-bit executable written in C# and .NET, generates a configuration file for domain name system (DNS) tunneling or Hypertext Transfer Protocol (HTTP) C2 communications; whereas Milan – a 32-bit Remote Access Trojan (RAT) retrieves data.

Both are able to communicate with the group’s command-and-control (C2) servers. The APT maintains a C2 server network that connects to the group’s backdoors, consisting of over 20 domains, including six that were previously not associated with the threat actors.

According to reports, individual accounts at companies of interest are usually targeted, and then once these accounts are breached, they are used as a springboard to launch spear-phishing attacks against high-profile executives in an organization. The report suggests that not only do these attackers seek out data on subscribers and connected third-party companies, but once compromised, threat actors or their sponsors can also use these industries to surveil individuals of interest.

However, to guard against this kind of threats, the NCC wishes to re-echo ngCERT reports that multiple layers of security in addition to constant network monitoring is required by telecom companies and ISPs alike to stave off potential attacks.

Specifically, telecom consumers and the general public are advised to:

  1. Ensure the consistent use of firewalls (software, hardware and cloud firewalls).
  2. Enable a Web Application Firewall to help detect and prevent attacks coming from web applications by inspecting HTTP traffic.
  3. Install Up-to-date antivirus programmes to help detect and prevent a wide range of malware, trojans, and viruses, which APT hackers will use to exploit your system.
  4. Implement the use of Intrusion Prevention Systems that monitors your network.
  5. Create a secure sandboxing environment that allows you to open and run untrusted programs or codes without risking harm to your operating system.
  6. Ensure the use of virtual private network (VPN) to prevent an easy opportunity for APT hackers to gain initial access to your company’s network.
  7. Enable spam and malware protection for your email applications, and educate your employees on how to identify potentially malicious emails.

For further technical assistance, contact ngCERT on incident@cert.gov.ng.

The NCC, as the operator of the telecom sector’s cyber threat response centre (CSIRT), hereby reiterates its commitment active surveillance and monitoring of cyber activities in the sector and will always keep stakeholders in Nigeria’s telecommunications sector updated on potential threats within the cyber space. This is to ensure that the networks that deliver essential services are safe and that telecom consumers are protected from being victims of cyber attacks.

Signed:
Dr. Ikechukwu Adinde
Director, Public Affairs

November 15, 2021Press Statement

Again, NCC alerts of hacking group targeting Telcos, ISPs

In keeping with its commitment to continuously keep stakeholders in the country’s telecoms sector informed, educated and protected, the Nigerian Communications Commission (NCC) wishes to, once again, notify the public of the existence of another hacking group orchestrating cyberespionage in the African telecoms space.

An Iranian hacking group known as Lyceum (also known as Hexane, Siamesekitten, or Spirlin) has been reported to be targeting telecoms, Internet Service Providers (ISPs) and Ministries of Foreign Affairs (MFA) in Africa with upgraded malware in a recent politically motivated attacks oriented in cyberespionage.

Information about this cyber attack is contained in the latest advisory issued by the Nigerian Computer Emergency Response Team (ngCERT). The ngCERT rated the probability and damage level of the new malware as high.

According to the advisory, the hacking group is known to be focused on infiltrating the networks of telecoms companies and ISPs. Between July and October, 2021, Lyceum was implicated in attacks against ISPs and telecoms organisations in Israel, Morocco, Tunisia, and Saudi Arabia.

The advanced persistent threat (APT) group has been linked to campaigns that hit Middle Eastern oil and gas companies in the past. Now, the group appears to have expanded its focus to the technology sector. In addition, the APT is responsible for a campaign against an unnamed African government’s Ministry of Foreign Affairs.

By the attackers’ mode of operation, Lyceum’s initial onslaught vectors include credential stuffing and brute-force attacks. So, once a victim’s system is compromised, the attackers conduct surveillance on specific targets. In that mode, Lyceum will attempt to deploy two different kinds of malware: Shark and Milan (known together as James).

Both malware are backdoors. Shark, a 32-bit executable written in C# and .NET, generates a configuration file for domain name system (DNS) tunneling or Hypertext Transfer Protocol (HTTP) C2 communications; whereas Milan – a 32-bit Remote Access Trojan (RAT) retrieves data.

Both are able to communicate with the group’s command-and-control (C2) servers. The APT maintains a C2 server network that connects to the group’s backdoors, consisting of over 20 domains, including six that were previously not associated with the threat actors.

According to reports, individual accounts at companies of interest are usually targeted, and then once these accounts are breached, they are used as a springboard to launch spear-phishing attacks against high-profile executives in an organization. The report suggests that not only do these attackers seek out data on subscribers and connected third-party companies, but once compromised, threat actors or their sponsors can also use these industries to surveil individuals of interest.

However, to guard against this kind of threats, the NCC wishes to re-echo ngCERT reports that multiple layers of security in addition to constant network monitoring is required by telecom companies and ISPs alike to stave off potential attacks.

Specifically, telecom consumers and the general public are advised to:

  1. Ensure the consistent use of firewalls (software, hardware and cloud firewalls).
  2. Enable a Web Application Firewall to help detect and prevent attacks coming from web applications by inspecting HTTP traffic.
  3. Install Up-to-date antivirus programmes to help detect and prevent a wide range of malware, trojans, and viruses, which APT hackers will use to exploit your system.
  4. Implement the use of Intrusion Prevention Systems that monitors your network.
  5. Create a secure sandboxing environment that allows you to open and run untrusted programs or codes without risking harm to your operating system.
  6. Ensure the use of virtual private network (VPN) to prevent an easy opportunity for APT hackers to gain initial access to your company’s network.
  7. Enable spam and malware protection for your email applications, and educate your employees on how to identify potentially malicious emails.

For further technical assistance, contact ngCERT on incident@cert.gov.ng.

The NCC, as the operator of the telecom sector’s cyber threat response centre (CSIRT), hereby reiterates its commitment active surveillance and monitoring of cyber activities in the sector and will always keep stakeholders in Nigeria’s telecommunications sector updated on potential threats within the cyber space. This is to ensure that the networks that deliver essential services are safe and that telecom consumers are protected from being victims of cyber attacks.

Leave a Comment

Your email address will not be published.

You may also like

Business Economy

Chowdeck Secures $2.5 Million in Seed Funding, Spearheading Growth in Nigeria’s Food Delivery Sector

post-image

 

 

Tobi Fasipe, Rider Operations Lead at Chowdeck, announced today a significant milestone in the company’s journey, as it secured $2.5 million in seed funding. This investment marks a pivotal moment for Chowdeck, highlighting its rapid expansion and commitment to revolutionizing the food delivery landscape in Nigeria.

Fasipe expressed his excitement about the recent achievements, citing the remarkable growth of Chowdeck’s on-demand delivery service. From processing just 1,000 deliveries daily upon his arrival, the company now boasts a dedicated team of over 3,000 riders handling an impressive 14,000 deliveries per day across 8 major Nigerian cities.

The meteoric rise in delivery volumes underscores Chowdeck’s relentless pursuit of excellence and dedication to providing exceptional service to its customers. This commitment is further evidenced by the company’s Gross Merchandise Value (GMV), which skyrocketed from ₦1 billion in October 2023 to an impressive ₦2.4 billion by March 2024, marking a remarkable 140% increase in just…

Read More
Business Economy Society

UBA Group GMAP Graduation Ceremony: Insights for Success Unveiled

post-image

 

In a resounding declaration of ambition and determination, the 2024 cohort of UBA Group’s Graduate Management Trainee Program (GMAP) stepped onto the stage last week, marking the beginning of their journey within the prestigious financial institution. Led by a seasoned executive, the induction ceremony not only welcomed the newcomers but also imparted invaluable insights for navigating the intricate pathways of career growth and personal development.

Reflecting on his own humble beginnings, the executive shared anecdotes from his early days as a trainee, highlighting the blend of ambition, thirst for knowledge, and the daunting challenges that lay ahead. Eager to engage with the fresh talent, he opened the floor to questions, unveiling the aspirations and concerns of a generation poised to leave their mark on the world.

Among the plethora of wisdom shared, several key takeaways emerged from the insightful dialogue:

1. Conquering Challenges with Resilience:** Armed with anecdotes from his own journey,…

Read More
Business Economy

Self-sustainability solutions and smart technology will help South Africa overcome its water crisis

post-image

 

 

Technology company, Versofy, best known for its solar solutions and services, says that preparing for South Africa’s water crisis should become a significant priority. The company, which is fast becoming a necessity-driven entrepreneurial brand, believes that further use of smart technology will also remain critical when addressing the pressing issues of water scarcity in South Africa.

 

Ross Mains-Sheard, Co-Founder and CEO of Versofy, says that South Africa’s water crisis is fast approaching scarcity status: “We believe that by promoting self-sufficiency and sustainability through our own smart technology solutions, we will help to address the increasing concerns regarding an imminent water shortage.”

 

The Development Bank of Southern Africa (DBSA) estimates that 2.2 billion people across the globe don’t have access to clean drinking water. This is of concern when considering that water is a basic need for health and hygiene.   According to DBSA, South Africa’s physical water scarcity will become…

Read More
Business Culture Economy Entertainment Investments

Nigerians Rally Against DSTV’s High Subscription Rates, Embrace SLTV as Affordable Alternative – Anthony Emeka Nwosu

post-image

 

Amid mounting dissatisfaction with DSTV’s steep subscription fees, Nigerians are turning to SLTV in droves, marking a significant shift in the country’s television landscape.

The online outcry against DSTV gained traction when Mike Igozino voiced his frustration, announcing his switch to SLTV and condemning DSTV’s exploitation of hard-earned income. His sentiments resonated widely, sparking a wave of support for SLTV as a more economical option for premium entertainment.

“I can watch all Premier League, Champions League, Italian and Spanish leagues with just #5K monthly?! And DSTV collects 23,800 from me monthly… Nigerians, shine your eyes, DSTV came to steal from us,” declared Igozino, encapsulating the sentiment of many disillusioned consumers.

Jennifer Chioma Owolabi echoed the sentiment, expressing her eagerness to explore SLTV as a viable alternative to DSTV. She sought insights into SLTV’s offerings beyond sports channels, highlighting the growing interest in diversifying entertainment options.

Read More
Business Economy Society Software

Azentio Software wins three honours at IBS intelligence (IBSi) Digital Banking Awards 2024

post-image

Azentio Software (“Azentio”) (www.Azentio.com), a Singapore-headquartered technology firm owned by funds advised by Apax Partners, announced today that it has won three awards with its respective clients, at the IBSi Digital Banking Awards 2024 ceremony, held as a part of the prestigious Cedar-IBSi Digital Banking & AI Summit, on April 19 in Bengaluru, India. The company was declared Segment Winners I SME/Corporate Banking, Regional Winners I Middle East & Africa, and Segment Winners I Compliance Management.

 

Organised by IBS intelligence (IBSi), one of the world’s leading financial technology research, advisory, and news analysis firm firms, the annual award program honours technology players, Banking as a Service (BaaS) providers, digital banks, neo banks, and challenger banks for their excellence in driving impact through technology implementations and innovations using emerging technologies.

The Azentio Accolades

  • Digital Badge of Segment Winners I SME/Corporate Banking
  • Digital Badge of Regional Winners I…
Read More
Announcements Business Economy

Ethnos Hosts FinTech Association of Nigeria for Collaborative Discussions on Cybersecurity

post-image

 

Ethnos, a leading cybersecurity firm based in Lagos, recently welcomed the esteemed members of the FinTech Association of Nigeria to their premises for a collaborative meeting aimed at enhancing cybersecurity measures within the financial technology sector.

The event provided an invaluable platform for industry stakeholders to engage in insightful discussions on the evolving landscape of cybersecurity in Nigeria’s burgeoning fintech industry. Led by Peter Ejiofor, the CEO of Ethnos, the gathering underscored the importance of fostering strong partnerships to fortify cybersecurity frameworks and mitigate emerging threats.

Expressing gratitude to the FinTech Association of Nigeria for their visit, Peter Ejiofor remarked, “Thank you to the FinTech Association of Nigeria for stopping by at our office. It was a pleasure hosting such esteemed professionals, and we are committed to fostering positive progress and achievements in our collaborative efforts moving forward.”

The meeting exemplified Ethnos’ dedication to promoting cybersecurity excellence and its commitment to supporting…

Read More
Business Economy Technology Technology Trends Telecoms

Africa Data Centres debuts ADC Channel programme

post-image

The primary goal of ADC Channel is to foster collaboration among partners within the ISP, Carrier, Telecommunications, Systems Integration, ICT and Data Centre providers; Channel Partners will have additional product offerings to add to their current portfolio and in turn generate new revenue streams; The programme offers partners easy access to data centre experts and will provide ongoing commercial and technical support.

Africa Data Centres, a division of the Cassava Technologies group, is excited to announce the launch of its exclusive channel partner programme, ADC Channel. This programme is designed to establish colocation and ecosystem partnerships, empowering members to expand their product portfolio & offerings alongside their market presence including an expanded data centre footprint.

ADC Channel presents a unique opportunity for global carriers, Internet Service Providers (ISPs), system integrators, Data Centres, Mobile Network, Content Developer, telecommunications companies, network infrastructure operators, hyperscalers and others to deliver state-of-the-art, sustainable and cost-effective digital solutions to…

Read More
Business

Chinenye Anuforo Honored with MTN Nigeria Foundation Chairman’s Award for Outstanding Reportage

post-image

 

Chinenye Anuforo, a distinguished journalist with The Sun Newspapers, has been recognized with the prestigious MTN Nigeria Foundation Chairman’s Award for Innovative Reportage. The award ceremony took place during the School of Media and Communication’s (SMC) graduation ceremony for the MTN Media Innovation Program (MIP-2).

Presented by Mrs. Odunayo Sanya, the Executive Director and Board Member of MTN Foundation, along with a cash prize, the award acknowledges Chinenye’s exceptional report on the MTN Foundation Y’ellopreneur initiative. This initiative focuses on empowering women entrepreneurs by providing essential tools such as training, funding, and mentorship.No alt text provided for this image

Chinenye’s report highlighted the significant impact of the Y’ellopreneur initiative on women’s entrepreneurial aspirations in Nigeria. Her insightful exploration of the program’s contributions earned her this esteemed recognition.

Expressing her gratitude, Chinenye Anuforo stated, “I am pleased to receive the MTN Foundation Chairman’s…

Read More